Effective Date: October 2, 2026

Last Updated: October 2, 2026

Welcome to rafat.xyz (“the Site”), a personal blog and website owned, authored, and operated by Rubaiyat Islam Rafat (“I,” “me,” or “my”). I respect your privacy and am committed to handling any personal data collected through https://rafat.xyz transparently and responsibly. This Privacy Policy details what information is collected, how it is handled, and your choices regarding your personal data.

1. Information Collected on This Site

Depending on how you interact with rafat.xyz, the following types of information may be collected:

A. Information You Provide Voluntarily

• Contact Inquiries: When you reach out via a contact form or direct email, I collect your name, email address, subject, and message content to reply to you.
• Comments and Discussions: If you leave a comment on a blog post, the Site collects the name/handle you provide, your email address, your website URL (optional), your message text, and the timestamp.
• Newsletter or Updates (if applicable): If you choose to subscribe to email notifications or updates, your email address is collected to deliver those communications.

B. Information Collected Automatically

• Server Log Data: Like most websites, the web server automatically records standard access data, including your IP address, browser type and version, referring URL, operating system, and the date and time of your request.
• Device and Usage Information: Pages viewed, reading time, outbound links clicked, and general browsing patterns across the Site.
• Approximate Location: Non-precise regional location (such as country or city) inferred from your IP address.

2. How Your Information Is Used

Information gathered on rafat.xyz is used strictly for the following purposes:

• To publish, maintain, optimize, and secure the blog and its content.
• To respond to your messages, inquiries, feedback, or collaboration requests.
• To display and moderate blog comments, preventing spam and abusive behavior.
• To analyze site traffic, readership trends, and content popularity using web analytics.
• To evaluate marketing performance, test promotional initiatives, and support retargeting campaigns if marketing tags are activated.
• To protect against malicious activity, unauthorized access, and automated abuse.

3. Legal Bases for Processing (EEA and UK Visitors)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), your personal data is processed under the following lawful grounds established by the General Data Protection Regulation (GDPR / UK GDPR):

• Consent: Where you provide explicit permission, such as subscribing to email updates or accepting non-essential analytics and marketing cookies. You may revoke consent at any time.
• Legitimate Interests: To run an accessible, functional personal blog, monitor readership metrics, prevent spam, and secure server infrastructure.
• Contractual or Pre-Contractual Need: When processing messages or requests related to professional services or direct inquiries.
• Legal Compliance: When required by statutory, tax, or legal obligations.

4. Analytics, Marketing Tags, and Pixels

rafat.xyz uses cookies, tracking scripts, and pixels provided by third-party analytics and advertising networks to evaluate readership metrics and support marketing activities.

A. Google Analytics 4 (GA4)

This Site uses Google Analytics 4, a service provided by Google LLC (“Google”), to understand how visitors engage with blog posts and pages.

• Data Collected: Page visits, scroll depth, engagement duration, device type, browser model, and general geographic location. GA4 does not store full individual IP addresses once regional lookup completes.
• Integration: Analytics data may be linked with Google advertising services to measure campaign efficiency and audience engagement.
• Opt-Out: Learn how Google handles site data by visiting How Google uses information from sites or apps that use our services. To opt out across the web, install the official Google Analytics Opt-out Browser Add-on.

B. Marketing Tags and Conversion Pixels

Marketing tags and conversion pixels from advertising networks (such as Google Ads, Meta Pixel, and LinkedIn Insight Tag) may be active on this Site to measure audience engagement and display targeted promotions across third-party platforms:

• Google Ads Tag: Tracks visits and conversions to measure advertising reach and deliver relevant search or display notices.
• Meta Pixel: Measures traffic driven from Facebook or Instagram and enables remarketing or custom audience delivery on Meta platforms.
• LinkedIn Insight Tag: Tracks conversions, measures professional reader demographics, and assists in retargeting on LinkedIn.

C. Summary of Tracking Technologies

D. Controlling Your Tracking Preferences

• Cookie Preferences: You can accept or decline non-essential cookies via the on-site cookie banner or preference toggle.
• Browser Settings: You can configure your browser to block third-party cookies, clear stored cookies, or navigate via private/incognito mode.
• Global Privacy Control (GPC): If your browser broadcasts an opt-out preference signal (such as GPC), rafat.xyz treats it as an automatic opt-out of marketing tracking.
• Consumer Choice Portals: You can opt out of interest-based ads via the DAA WebChoices Tool (US), EDAA Choice Tool (EU), or NAI Opt-Out Program.

5. Information Sharing and Third Parties

I do not sell, rent, or trade your personal information. Data is only shared in the following limited circumstances:

• Technical Service Providers: Trusted platforms that provide web hosting, content delivery (CDN), DNS management, email delivery, and anti-spam filtering (e.g., Akismet for comment spam detection). These providers process data under standard contractual confidentiality terms.
• Legal Obligations: If disclosure is reasonably necessary to comply with applicable laws, judicial orders, or lawful government requests, or to protect the safety and property of rafat.xyz and its readers.

6. International Data Transfers

rafat.xyz is accessible globally, and its hosting servers, content distribution networks, and analytics providers may store and process data in various jurisdictions outside your home country, including the United States. Where required by law, appropriate data transfer mechanisms (such as Standard Contractual Clauses) are utilized by service providers to maintain data security across borders.

7. Data Retention and Security

Personal data is retained only for as long as necessary to fulfill the purposes described in this policy:

• Contact inquiries and correspondence are retained only as long as needed to address your communication.
• Approved blog comments remain published alongside the post indefinitely unless you request their removal.
• Analytics data in Google Analytics is retained in accordance with standard data retention settings (typically 2 to 14 months) before automatic deletion.

Technical safeguards—including SSL/TLS encryption across the entire site and administrative access restrictions—are maintained to protect against unauthorized access, loss, or misuse. However, no data transmission across the internet is entirely risk-free.

8. Your Privacy Rights

Depending on your location and applicable privacy laws, you may have the following rights regarding your personal data:

• Access and Portability: Request confirmation of what personal data is held and receive a copy of that data.
• Correction: Request updates or corrections to incomplete or inaccurate personal records.
• Erasure: Request the deletion of your personal information (such as previously submitted comments or contact history).
• Objection and Restriction: Object to or request limitations on certain data processing activities.
• Withdrawal of Consent: Withdraw consent previously provided for optional cookies or direct messages at any time.

To exercise any of these rights, email your request directly to hello[at]rafat[dot]xyz. Requests will be reviewed and addressed within standard statutory periods.

9. Notice to California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), California readers are entitled to the following disclosures:

• Categories Collected: Identifiers (name, email, IP address), internet/electronic network activity, and approximate location data.
• Sale and Sharing Notice: I do not sell personal data for monetary compensation. However, the presence of third-party marketing pixels and tracking cookies may be defined as “sharing” data for cross-context behavioral advertising under California law.
• Opt-Out Rights: California residents have the right to opt out of the sharing of personal data, request deletion or correction, and will not experience discrimination for exercising these rights.
• Exercising Rights: You can submit an opt-out or deletion request by emailing hello[at]rafat[dot]xyz or by using a browser that broadcasts the Global Privacy Control (GPC).

10. Children’s Privacy

rafat.xyz is a general audience personal website and is not directed at children under the age of 13 (or under 16 in applicable jurisdictions). I do not knowingly collect personal data from children. If you believe a minor has submitted personal information through a comment or form without parental consent, please contact me at hello[at]rafat[dot]xyz so the record can be deleted immediately.

11. External Links and Third-Party Content

Blog posts on rafat.xyz frequently link to third-party resources, articles, software tools, and websites. I do not control and cannot accept responsibility for the privacy practices, tracking methods, or content of those external websites. I encourage you to read the privacy statements of any external sites you visit.

12. Policy Changes

This Privacy Policy may be updated periodically to reflect changes in site features, tracking tools, or legal requirements. When changes are made, the “Last Updated” date at the top of this page will be revised. Significant changes will be noted via a brief announcement on the blog homepage.

13. Contact Information

If you have questions, feedback, or data requests regarding this Privacy Policy or the practices of rafat.xyz, you can reach out directly:

Rubaiyat Islam Rafat
Website: https://rafat.xyz
Email: hello[at]rafat[dot]xyz